HIPAA and privacy counsel
Risk analysis, privacy notices, policies, and what to do in the first forty-eight hours after something goes wrong.
Attorney at Law · Admitted in Connecticut
Health privacy law for practices that cannot afford a compliance department.
I help behavioral health practices, and the companies that serve them, work out what HIPAA actually requires. In plain English, and before it becomes a problem rather than after.
Most health privacy lawyers came up through healthcare. I came up through compliance.
I have spent my career building and running compliance programs in heavily regulated industries, including securities and international banking. Fields where getting it wrong is expensive, and where a regulator does not accept good intentions as an answer.
That is a different habit of mind from reading a rule and reporting back. It is the habit of asking what a practice actually does every day, and then building something that survives contact with a Tuesday afternoon.
Patient information is the same discipline pointed at a different regulation.
What I handle
Three kinds of work
Compliance program design
Building the program rather than auditing it afterward. Training, documentation, and a structure that a small team can actually keep running.
Vendor and contract review
Business Associate Agreements, service contracts, and the paperwork sitting between a practice and everyone who touches its records.
Who I work with
Practices that are small enough that the rules feel like someone else's problem.
01
Solo and small behavioral health practices
Therapists, psychologists and counselors who are the whole compliance department as well as the clinician.
02
Group practices and clinics
Where someone has been handed compliance on top of a job they already had.
03
Companies serving healthcare
Health technology, billing services and compliance vendors who handle patient information on someone else's behalf.
Not sure whether the rules even apply to you?
That is the most common question I get, and it is a short conversation rather than a long one. No charge to ask it.